Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee

This is actually a well-intentioned security feature, but you can get around it with the following trick:

  1. Create a simple LTM virtual server - you can bind this to the VPN connectivity profile "VLAN" or to an internal VLAN (do NOT bind this to an external VLAN)

  2. Apply a simple client SSL profile to the VIP

  3. Apply a simple server SSL profile to the VIP

  4. Apply the following iRule to the VIP:

    when CLIENT_ACCEPTED {
    node 127.0.0.1 443
}

    Depending on platform version you may need to use an internal VLAN self-IP instead of 127.0.0.1.

imabbas_90's avatar
imabbas_90
Icon for Altocumulus rankAltocumulus
Oct 12, 2023

Hello Mate thanks i was also facing same issue. After connecting to the VPN cant connect to the SAME F5 device. 

After creating the Virtual server with the MGMT IP of F5 and allowing All VLAN and tunnels then created Irule 

when CLIENT_ACCEPTED { node 127.0.0.1 443}

then created one more VIP for port 22 

 

when CLIENT_ACCEPTED { node 127.0.0.1 22 }

it's working now.